Legal
Privacy Policy
Version 1.0, effective October 8, 2026
Template: This page is a starting point written for IronVault. It is not legal advice. Before launch, have it reviewed for your country and business, and replace the [bracketed] details.
What we collect
- Account and order details: your name, email, billing address and the services you buy.
- Payment details: Stripe handles these directly. We never see or store your full card number.
- Support details: what you send us through the contact form, tickets and Discord, including your Discord username if you give it to us.
- Technical data: IP addresses, server logs and usage metrics, which we need to run the service and protect it against abuse.
How we use it
We use your data to provide and bill for your Services, give you support, prevent fraud and abuse, and meet our legal obligations. We do not sell your personal data.
Who we share it with
- Stripe: to process payments.
- Discord: to run support tickets and grant customer roles, if you choose to use Discord.
- Data centre providers: where your servers are hosted.
- Authorities: when the law requires us to.
How long we keep it
We keep account and billing records for as long as the law requires, usually [7] years. Server data is deleted [14] days after a Service ends. Support tickets are kept for [2] years. If you delete your account, invoices and the records above stay for those periods, without your name or email address. We also keep a record of each version of our terms you accepted (with the date, a scrambled form of your IP address that can't be turned back into it, and your browser type) to show what you agreed to.
Cookies
This site uses only essential storage. For example, it remembers the billing cycle and location you chose. It does not use advertising or tracking cookies.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to how we use it. Email privacy@ironvaulthost.com and we will reply within 30 days.
Download your data. Under Your data in the client area you can download a copy of your account data as a file at any time (you confirm your password first). It covers your profile, services, a list of your invoices, support tickets, projects, account credit, gift cards, the versions of our terms you accepted, how you sign in and your alert settings. It never contains passwords, server passwords or API keys. Invoice PDFs are in the billing portal.
Delete your account. You can delete your account from the same place once you have no active services, unpaid invoices or open projects (the page tells you what's left). The deletion happens [7] days later, and we email you a link to cancel it until then. When it happens we remove your login and linked sign-in methods, your alert and notification settings and your saved payment methods, and replace your name and email address with an anonymous placeholder. We keep invoices, payment and tax records, records of the terms you accepted, and security and audit logs for as long as the law requires (see "How long we keep it"), without your contact details. Support tickets are kept but marked as anonymised.
Contact
[IronVault Hosting legal entity name and address]